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Description 

A method for dense and secure 
transmission of signals and information 
using a small number of channels 

Cross Reference To Related Applications 

[0001] This application claims priority from U.S. provisional 

patent application Ser. No. 60/500,145 filed September 1, 
2003. 

Background of Invention 

[0002] The extreme bandwidth of a single optical fiber (25 000 
GHz) is 1000 times larger than the total radio bandwidth 
of planet Earth (25 Chz). Using this bandwidth effectively 
requires novel network designs. 

[0003] Suppose that there are given n Senders S^.S^ S^ and r 

Receivers R ,R ,...,R . Let p be a function from {l,2,...,n} to 

12 r 

{1,2 r}. Our goal is to send long messages from S. to R 

, for i=l,2 n such that 

P(i) 

[0004] can easily retrieve the message of S., for i=l,2,...,n, 



and 

[0005] R cannot retrieve the message of S if p(i) is not equal to 

P(i) j 

pO). 

[0006] An obvious metliod for doing tiiis is connecting S witli R 

^ ^ i P(i) 

witli private channels, that is, we use n channels for the n 
Senders and the r Receivers. The advantage of this solu- 
tion is that n bits can be sent in parallel, and the trans- 
mission is private, in the sense that R receives only the 

p(i) 

transmission of S, for 1 = 1,2 n. The privacy is satisfied 

i 

only if others have not access to the private channels. The 
disadvantage of this solution is that the number of chan- 
nels is equal to the number of communicating pairs, and 
this is infeasible in most cases. 
[0007] Another problem with this solution is that if next time S 

i 

wants to send messages to R , for i = l,2 n for some 

s(i) 

other function s, then the whole network has to be recon- 
figured. If every Sender is directly connected to all Re- 
ceivers, this solves the reconfiguration problem, but then 
the number of channels becomes nr. Applying some clas- 
sical interconnection networks (e.g., the butterfly, Benes 
network, CCC) needs routers with buffers (local memory). 
Due to the table-lookup features of routers and the need 
of optical memory, all-optical routers are hard to con- 



struct, expensive and still relatively slow components. 

[0008] Another obvious solution is that all the Senders and Re- 
ceivers use the same channel, and they transmit their 
messages one after the other. Transmitting n bits this way 
needs n steps. In this case either a router has to be used 
just before the messages get to the Receivers, or some 
sort of encryption is needed for maintaining the privacy of 
the transmission. 

[0009] Using encryption has several drawbacks. Streamciphers, 
the most evident cryptographic tool which are fast and do 
not cause overhead in the communication have lots of re- 
cently proposed and successful attacks. Block-ciphers are 
much slower, and may be infeasible in, say, in the 1000 
Cbit/s range, and also, they causes non-negligible over- 
head in the communication. 

[0010] Using routers and addressing in the messages will also 
slow down the communication, especially in all-optical 
environments: with, say, 1000 Gbit/s throughput, by the 
best of our knowledge, no routers exist. 
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Summary of Invention 



[0021] In the present disclosure we give a description of a net- 
work, together with the associated networl<- protocol, in 
which 

[0022] jhe n Senders and the r Receivers are connected with only 
r°^^^ channels (Here o(l) denotes a quantity which goes to 
0 as r goes to the infinity.) Note, that in practice at most 
32 channels are enough. The parallel channels will not 
speed up the transmission relative to the 1-channel net- 
work: the goal of using them is to facilitate the privacy of 
the communication and the distribution of the messages 
between the recipients, without any encryption or routers. 

[0023] The encoding and decoding is nothing else just linear 

combinations of the message-bits, and this linear combi- 
nations can be computed really fast. 

[0024] There are no switching or routing-elements in the net- 
work with hard-to implement buffers and local memory, 
just linear combinations are computed, with fixed connec- 
tions (channels or wires); moreover, the network compo- 
nents used are simple enough to implement in fast all- 
optical networks. 

[0025] R can learn only very little about any bit of the message 

p(i) 

of S for any p(j) not equal to p(i), and only a negligible 

j 

amount of information on longer messages of S.. 



[0026] jhe security of our network is information-tlieoretical 

rather than cryptographical, in the sense that it does not 
depend on unproven cryptographical primitives. 

[0027] In pacl<et-switched networl<s, the Receivers should know 
their own identity (say, an IP or MAC address) in order to 
pick up only those packets from the transmission chan- 
nels, which are addressed to them. In the disclosed net- 
work architecture, the Receivers need not know even their 
own identity: the bits, intended to be sent to them, will 

find them securely and automatically. 
Brief Description of Drawings 

[0028] FIG. 1 is a schematic drawing of our network in the case 
when the number of the Senders and the Recievers are 
also n. 

[0029] FIG. 2 is a drawing of a preferred embodiment of the in- 
vention as a multicasting network. 
Detailed Description 

[0030] Let S , S S denote the Senders, and let R ,R ,...,R de- 

1 2 n 1 2 r 

note the Receivers. 
[0031] Additionally, we have t<n data transmission channels, 
used for long-distance connection between Senders and 
Receivers. Each Sender is connected through some modu- 



lar addition gates to all of these t channels, while the Re- 
ceivers may be connected through modular addition gates 
only to certain subsets of the channels. 
[0032] On one channel one bit may be transmitted at a time. If 
one Sender sends several bits simultaneously to an h ele- 
ment subset of the t long-distance channels, then these 
bits will travel synchronously on these h channels: that 
means, that for any i. Receiver R will get those bits which 
were sent simultaneously, from all the long-distance 
channels, connected to R, at the same time. However, we 

i 

do not suppose that different Receivers get these bits at 
the same time (it is allowed that farther situated Receivers 
get the bits later than the closer ones). 
[0033] Figure 1 describes the general scheme in the case when 
n=r. We need that the Sender's bits travel synchronously 
on the t long-distance channels (item 2). (Note, that this 
requirement can be assured by using the same wave- 
length optical signals on each channel, and by compen- 
sating for the distance-differences at the Senders side by 
installing fiber loops: this way the signals - if sent simul- 
taneously by all the senders - will travel synchronously). 
However, we need not assume that the signals reach all 
the Receivers at the same time: the Receivers are allowed 



to be scattered along the long-distance channels (see Fig- 
ure 2). 

[0034] A general method was shown in (Vince Grolmusz: Low 

Rank Co-Diagonal Matrices and Ramsey Graphs, Electronic 
Journal of Combinatorics, Vol. 7, (2000), No. 1, R15) for 
the construction of n x n matrices A' with O's in the diago- 
nal and non-zeroes elsewhere modulo a non-prime power 
integer, denoted by m. Said construction has the main 
property that said matrices have small rank modulo m, 
that is, matrix A' can be written as the matrix product B'C 
modulo m, where B'is an n x (t-1) and C is a (t-1) x n ma- 
trix with integer elements, where t is a small number rela- 
tive to n, that is, t=n°^^\ where o(l) denotes a positive 
quantity which goes to 0 as n goes to the infinity. 

[0035] It is also known from the prior art, that said matrix A' can 
be constructed that way, that if m has distinct prime divi- 
sors p^, p^ p^, then the non-zero elements of matrix A' 

are either 0 or 1 modulo p , for 1 = 1, 2,... ,r. For example, if 

i 

m=6, then the non-zero elements of matrix A' are either 
3 or 4, modulo 6. 
[0036] Let J denote the n x n all-1 matrix. Let us consider the 
matrix A=J-A'. It contains I's in the diagonal, and num- 
bers, congruent to zero modulo at least one prime divisor 



of m. Returning to the previous example, witli m=6, we 
have that A has either 3 or 4 or 0 outside of the diagonal. 
Matrix A can be written as the matrix product BC modulo 
m, where B is an n x t and C is a t x n matrix with integer 
elements. 

[0037] There are several other ways to construct matrices with 
similarly useful properties than that of A. Such method is 
known from the prior art (e.g.,Vince Grolmusz: A Note on 
Explicit Ramsey Graphs and Modular Sieves, Combina- 
torics, Probability and Computing Vol. 12, (2003) pp. 
565-569). Another way is to construct matrix A is as fol- 
lows: the entry in row i and column j of matrix A is de- 
fined as the Hamming-distance of the binary forms of 
numbers i and j. By this definition we get matrices B and C 
such that A=BC, where B is an n x t and C is a t x n matrix 
with integer elements, and t=0(log n). 

[0038] The larger the quantity n is, the smaller the quantity t be- 
comes, relative to n. 

[0039] Let x=(x ,x ,...,x ) be a sequence of n variables. We can 

12 n 

compute the following t=n° linear forms of the x.'s, de- 
noted by z=(z^,z^,...,z^), such that using another linear 
transform to this z, we get back a representation of the x. 
More exactly. Let A=BC. Then let z=xB, and 



x'=zC=xBC=xA. This forms the main idea of our networic 
architecture. 

[0040] First we describe the networl< in the case when n=r and 
Sender S wants to send bit x to Receiver R , for 

i i i 

i = 1,2 n. 

[0041] Figure 1 gives a schematic description of the network. 

From bits x=(x ,x x ) , numbers z=(z ,z ,...,z )=xB are 

l' 2' ' n ' l' 2' ' t 

computed with the modular addition gates (item 1). Num- 
bers z ,z ,...,z are transmitted on the t long-distance 

1 2 t ^ 

channels (item 2). At the receivers' side (item 3), from 
these z^ ,z^ z^ numbers, modular gates (item 4) com- 
pute the n coordinates of x'=xBC=xA. 

[0042] Note, that generally x' is not equal to x; for example, if 
m=6, then matrices B and C can be chosen such that x'= 
X + 4xU + 3xV=xBC=zC=xA, where U and V are n x n 
matrices with 0' in the diagonal, satisfying that at any 
non-diagonal position either U or V is zero modulo 6. 

[0043] Consequently, for the retrieval of the original message 

bits X, some further steps should be taken. We disclose a 
method, called filtering here. 

[0044] vVe describe the transmission-protocol and the filtering 
method in rounds. In every round, every sender S will 

i 

transmit securely a bit x. to the corresponding receiver, R , 



i = l,2,...,r. In u consecutive rounds, every sender will send 
u bits, that is, sending u-bit messages needs u rounds of 
the following protocol. 
[0045] A round is performed as follows: 

[0046] Step 1 - Encoding (item 1) - From the bits of x the mod m 
integers z=(z^,z^,...,z^) are computed by linear combina- 
tions taken modulo m: z=xB mod m. 

[0047] Step 2 (item 2)- Transmission - The mod m numbers z^,z 

z are sent on t channels to the receivers. 

2' ' t 

[0048] Step 3 - Decoding - The linear transformation x'=(x'^,x' 
^...,x'^,=xBC=xA=zC is computed modulo m at the re- 
ceivers' side, and number x' is given to receiver R, for 

1=1,2 r. (Note, that because of information-theoretical 

reasons, generally it is not possible to retrieve bit x. from 
integer x'.). 

[0049] Step 4 - Pre-Filtering - A random g permutation on the 

set {1,2 n} is generated at the sender's side. Then for 

j = l,2 n, steps 1, 2 and 3 are repeated for x^^^ instead 

of x, where x^^^ coincides with x, except on position g(j), 
whereas x^^^ is 0 if it was 1 in x, or 1 if it was 0 in x. Let 
x" denote the coordinate i of x^^^CT. 

i 

[0050] Step 5 - Post-Filtering - Now, receiver R stores value x'. in 
its memory, and follows the next program after receiving 



any new x"., originating in Step 4: 
[0051] jf x" -x' is divisible by a prime divisor of number m, it 

i i 

does nothing; 

[0052] if x" =x' -1 modulo m, then R concludes that x =1; 

i i i i 

[0053] if x" =x' + 1 modulo m, then R concludes that x =0. 

i i i i 

[0054] Next we disclose our network protocol in the case n=r and 
Sender S intends to send messages to Receiver R where 

i ^ P(i) 

p(i) is a permutation. The network can easily be reconfig- 
ured as follows. Since all the Senders are connected to all 
the channels - Sender S will simply send the same mes- 

i 

sages as Sender S would have sent to R . Note, that no 

^ P(i) P(i) 

wiring and no modular addition gates (items 1 and 4 on 
Figure 1) are changed. 
[0055] Next we disclose the network protocol in the case when n 
and r are not necessarily equal, and the function p from 
{1,2 n} to {1,2 r} gives the addresses of the mes- 
sages: Sender S. wants to send message to Receiver R^^.^, 
for i = l,2,...,n. 

[0056] If p(j) is an injection (that is, no Receiver gets messages 
from two different Senders), then the original network 
protocol (and filtering) works. 

[0057] Suppose now, that S^, S^, S^ want to send messages to - 



say - R^. Then we play the original network protocol with 
the substitution x +x +x for x and 0 for x and x . 

12 3 1 2 3 

Then, x +x +x will appear at R with coefficient 1. Now, 

' 1 2 3 1 

in the filtering process, only those random permutations 
may be used that fix the order of the image of the first 
three numbers, for example, for the images of x^x^x^, the 
image of ,x^, should precede the image of x^, and this 
should precede the image of x^ and , This property facili- 
tates that R^ can recollect the bits of the long sequences 
which is sent to her by S^, and S^, respectively. Clearly, 
this method can be generalized to any other function p, 
by fixing the order of the images of variables sent to the 
same Receivers. 

[0058] The privacy in the messaging of the network-protocol re- 
lies on the independently generated random permutations 
g in each round. Let us review, what R can learn from the 
bits, addressed to others. After each round of the proto- 
col. Receiver R learns its own bit, and also the number of 

i 

the 1-bits with the same, not-1 coefficients in the form of 
x' , for i=l,2 n, but R will not know the identity of that 

i i 

bits. 

[0059] Although the subject invention has been described with 
respect to particular embodiments, it will be readily ap- 



parent to those having ordinary sicill in the art to which it 
pertains that changes and modifications may be made 
thereto without departing from the spirit or scope of the 
subject invention as defined by the appended claims. 



